weddpros

To be honest, it's rather difficult and costly to run, with a 1.5B rows database of indexed unexpired certificates and a scanning job that took weeks from dozens of IPs.

You're absolutely right, at the enterprise level, managing an SSL fleet goes far beyond just issuance, and you can't assume the certificates you're issuing are the only ones that exist.

Shameless plug: if you need to cut through the noise of thousands of certs across thousands of hosts, there's https://sslboard.com

AI Coding is becoming an edge, and sharing your edge isn't the wisest thing to do, even more so when doubt is so prevalent!

Étant français, je n’ignore pas les différents synonymes disponibles. Mais le mot société a les deux sens, et est TRÈS utilisé dans les deux sens. Au point que cette app montrait société comme étant la traduction de society et de company. Je voulais voir si d’autres langues européennes étaient similaires.

French is the only language where Company and Society are the same word: société. It's fun to watch

I see where you stand, and I hear a lot of negative anticipation. What happens if things actually go well in the end?

1- I think the previous administration used various agencies to avoid justice quite a lot. Heard of a laptop maybe? If agencies were shields for the last admin’s messes, why assume they’re pure now?

2- I wouldn't say republicans started the cultural wars over progressive ideologies

3- The US still votes, judges rule, hardly a dictatorship. Fascists charm everyone, while Trump and Musk two just piss half off

It's more likely that Europe will double down on its politics as they always do. If it doesn't work, try harder with more of it: more rules, more laws, more exceptions to rules, more special cases, more Switch and If/Then/Else.

Think technical debt with 0 refactoring ever, because you can't break the existing system, only grow it.

A refactoring, that's how I see what the government is currently doing in the USA.

(I'm French, living in Asia)

"reading the comments gave me a headache..."

you, 45 days ago

Search Migrainous Infarction. I had one when I was 32 (53 now). It's very rare, but a migraine can cause a stroke (ie. permanent brain damage), because of impaired blood flow. It left me with a permanent scotoma ("black" hole in my fov, visible from both eyes and with both eyes open).

I was scanning the comments to see if anyone needed that information.

If the aura doesn't stop after an hour, better go to the hospital (aura means reduced blood flow). Also NEVER take triptans during an aura.

Go to perplexity, learn a thing and use the sources it provides with its results.

Then see for yourself who's the parrot with no sources.

Asked Perplexity to summarize and answer to you:

Tobacco litigation ($23.6B)

BP oil spill ($20.8B)

VW emissions scandal ($38B)

Enron/WorldCom financial fraud ($9.55B combined)

Pharmaceutical/auto/mortgage cases ($16.15B combined)

Remember the multiple times tech companies have been fined for failing to "protect privacy"?

Do you remember of any agency having any kind of trouble after leaking private data? It's always the hackers that are to blame when there's a data leak in a government agency.

But when there's a hack at a company? the blame seems to go 100% on the company.

Let's remember, it's not just about privacy, it's privacy against government overreach. Those in power, whether government officials or public servants, often abuse it.

The public might want to defend their privacy vs. corporations, and/because the media will spin privacy to target companies, while government and public servants escape accountability for their actions.

Maybe only parent-child can be unconditional, but it doesn't imply ALL parent-child love is unconditional though

You can compress 10Gbit/s down to 10bit/s but then you can't do the reverse operation... Yeah, we know.

To me it's like saying "I've summarised this book to 5 words, so why would you even need a few days to read it entirely?".

the thing is you'd need 3 k8s queries, one for pods, one for deployments, one for services, then link all of them, and filter... jq helps with the filtering, kubectl can query, but you still need to join the 3 resources to answer the query...

Cyphernetes seems capable of graph/relational logic.

The example on the homepage is literally "give me deployments with more than 2 replicas with pods that are not Running, and give me the IP address of the service they're serving"...

Any idea how to do that with kubectl | jq? Their solution seems elegant to me.

Meanwhile, some companies are building products with Prisma and are enjoying their choice. I love Prisma with Postgresql and Typescript, it's a very productive tool.

My first opinion wasn't very far from yours, but then I adopted it. It has served me well after a year and multiple projects.

you're right... but also I was being cynical

It's barely enough to subsidise a war for one year...

Exactly like with your paper wallet, you'll have to go to the authorities and they'll have to certify your new ID / keys... except it's possible to rekey you identity, to have escrows hold rescue keys, etc... many things you can't do without a Digital ID.

Brilliant indeed

looks like it... DIDs are a part of the tech

You can look into "Sovereign Identity", which could offer a solution to this very problem, in theory. It's a decentralised digital identity framework using cryptography.

The idea is to take identity upside down: you issue your own identity (think key pair), and an authority certifies it (aka. signature). That's why it's called sovereign.

Adding zero knowledge proofs adds support for more privacy preserving tech: prove your address is in a specific country, without giving your address, or prove your age without giving your birthdate.

Although it could all be implemented today, governments don't... because they love centralisation for the power it gives them. European institutions are working on Sovereign Identity projects, but it's mostly 100% centralised bullshit from what I know.

As with all things cryptographic, if you don't own the keys, you own nothing.

Do you think you could create an `npx create-boilerplatr-boilerplate my-boilerplate` project in the same vein as `npx create-react-app my-app`? Would be a huge time saver.

I created two SSL related projects, SSLPing and SSLBoard, and both helped me get jobs, starting in 2016.

SSLPing would check TLS servers like SSLlabs does, but way faster and would repeat the test every day and email you alerts. Got to 700 users, and impressed a few hiring managers. SSLPing's shutdown made the HN front page in 2021!

SSLBoard would scrape all Certificate Transparency logs and collect and index all certificates in real time. I got my last job thanks to it.

I even refused an incredible acqui-hire offer from a US company. I thought I'd rather work on my project alone... I should probably have said yes.

I've started working on SSLBoard again, and I'm moving SSLPing to a serverless architecture, because I have nothing left to show recruiters, only stories to tell...

You can't choose how you will be identified by people as being of some race, gender, religion, political beliefs... which all constitute illegal discrimination for employment in some countries (France is an example where it's illegal to discriminate on political opinion, or in our case, supposed opinion I shall say).

A hard pass on crypto means passing on people who

- wanted to bank the poor

- wanted freedom

- wanted self sovereign identity

- wanted border-less transfers for their family abroad

etc... Many people want to do good with crypto.

Questions: is it immoral to be in it only for the money at a carbon sequestration startup? How do you tell, from a resume? What if this startup is just greenwashing bs in the end? What if the money is to help his grand parents in the Philippines?

I think there's no clear cut way to judge the morality of someone from their resume: not from their skin color, nor from their previous work places. And I think it's unethical to judge people on what you presume of their own morality.

sounds just as bad as racism

Now I want to put a banner on my .io website to remind visitors of this story

same, in Siem Reap

Location: SE Asia

Remote: fully

Willing to relocate: SE Asia

Technologies: Backend, JS TS node.js, Golang, Kubernetes, Docker, Mongodb, SQL, RabbitMQ, AWS, distributed architectures

Resume/CV: https://www.linkedin.com/in/christophe-hartwig-ba228a5/ or https://public-chris.sfo3.digitaloceanspaces.com/Resume-Chri...

Email: chris@chris-hartwig.com

I'm Chris, a senior Backend Engineer with experience in both international groups and startups. After a few entrepreneurial years, I want to return to working in a distributed team, working with Go, node.js, K8S, etc. From Development to Architecture to Tech/Project Management, I've developed various skills. I have a very strong affinity with technology and I'm always learning new things. That's why I love this job: it never gets boring, if you know to keep the excitement going. I'm looking forward to having a talk about your projects, your company and the future we could create together.